Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all articles
Browse latest Browse all 32753

alexosaurus on "[Plugin: Wordfence Security] Please don't use HTTP 503 to indicate throttling!"

$
0
0

Hello plugin authors,

Many of our clients use your Wordfence plugin (great!), however your use of the 503 response code to indicate that a host has been blocked is rather inconvenient.

This is for a couple of reasons:

* It deviates from what WordPress usually does (200 for failed login, 302 for success), so server-level filters (such as mod_security) stop working, and we end up having to write extra rules to deal with Wordfence
* It creates noise - may be monitoring the volume of 503s as an warning sign of other problems, the plugin dilutes the stats and again has to be filtered out
* It's not semantically correct

So thank you for writing a great plugin, and please consider this plea from an ops person to either follow WordPress' behavior or use a more-correct 4xx code.

Alex

https://wordpress.org/plugins/wordfence/


Viewing all articles
Browse latest Browse all 32753

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>